JNCIA-Cloud Juniper Associate Cloud

Which cloud service model delivers virtualized computing infrastructure (servers, storage, networking) over the internet and gives the customer control over the operating system, middleware, and applications?

• ASoftware as a Service (SaaS)
• BPlatform as a Service (PaaS)
• CInfrastructure as a Service (IaaS)
• DFunction as a Service (FaaS)

A development team wants a cloud environment where they can deploy and run their web application without managing the underlying OS patches, runtime upgrades, or server scaling. Which service model best fits this requirement?

• AInfrastructure as a Service (IaaS)
• BPlatform as a Service (PaaS)
• CSoftware as a Service (SaaS)
• DNetwork as a Service (NaaS)

Which cloud deployment model is built for exclusive use by a single organization, whether hosted on-premises or by a third party, and is not shared with other tenants?

• APublic cloud
• BCommunity cloud
• CHybrid cloud
• DPrivate cloud

An organization uses its own on-premises data center for sensitive workloads and bursts to a public cloud provider during peak demand. Which deployment model describes this architecture?

• APrivate cloud
• BCommunity cloud
• CHybrid cloud
• DMulti-cloud

Which cloud deployment model is shared exclusively among several organizations that have common concerns — such as regulatory requirements or a shared mission — rather than being open to the general public?

• APublic cloud
• BPrivate cloud
• CHybrid cloud
• DCommunity cloud

A Type 1 hypervisor differs from a Type 2 hypervisor primarily because it:

• ARuns on top of a host operating system
• BRuns directly on the physical hardware without a host OS
• CUses software emulation instead of hardware virtualization
• DCan only run a single virtual machine at a time

VMware ESXi is best classified as which type of hypervisor?

• AType 2 hypervisor
• BType 1 hypervisor
• CContainer runtime
• DParavirtualization driver

KVM (Kernel-based Virtual Machine) is built into the Linux kernel. How does this architectural decision classify KVM?

• AType 2 hypervisor, because Linux is the host OS
• BContainer runtime, because it uses kernel namespaces
• CType 1 hypervisor, because the Linux kernel itself becomes the hypervisor
• DEmulator, because it does not use hardware virtualization extensions

Which statement correctly distinguishes a Docker container from a virtual machine?

• AContainers include a full guest OS kernel; VMs share the host OS kernel
• BContainers share the host OS kernel; VMs include a full guest OS per instance
• CContainers require a Type 1 hypervisor; VMs run directly on hardware
• DContainers are heavier than VMs because they include hardware emulation

In Kubernetes, what is a Pod?

• AA physical server node in a Kubernetes cluster
• BThe smallest deployable unit, consisting of one or more tightly coupled containers sharin…
• CA Kubernetes object that load-balances traffic across multiple cluster nodes
• DA persistent storage volume attached to a cluster node

A Kubernetes Deployment object is primarily used to:

• ADefine network routing rules between cluster namespaces
• BDescribe the desired state for a replicated set of Pods and manage rolling updates
• CProvide persistent storage to stateful applications
• DAuthenticate users to the Kubernetes API server

A Kubernetes Service object serves which primary function?

• AIt schedules Pods onto available worker nodes
• BIt stores configuration data and secrets for Pods
• CIt provides a stable network endpoint (virtual IP) and load balances traffic across match…
• DIt manages the lifecycle of persistent storage volumes

In Software-Defined Networking (SDN), what is the key architectural change compared to traditional networking?

• AThe data plane makes forwarding decisions independently of any centralized controller
• BThe control plane is decoupled from the data plane and centralized in a software controll…
• CPhysical cabling is replaced entirely by wireless links
• DRouting tables are eliminated and replaced with MAC-address-only forwarding

OpenFlow was significant in the early SDN movement primarily because it:

• AProvided a proprietary vendor API for controlling Juniper devices
• BDefined a standardized, open protocol for a controller to program forwarding rules in dat…
• CReplaced TCP/IP entirely as the transport layer in data centers
• DIntroduced the concept of VLANs for Layer 2 segmentation

What does 'programmable fabric' mean in the context of SDN?

• APhysical fiber-optic cables that can be reconfigured by software commands
• BA network infrastructure whose forwarding behavior can be dynamically modified through so…
• CFabric as a service offering from a cloud provider for managed SD-WAN
• DA Juniper product that replaces the Routing Engine with a programmable FPGA

In the ETSI NFV architectural framework, what is a VNF (Virtual Network Function)?

• AA physical router or switch appliance installed in a data center
• BA software implementation of a network function — such as a firewall, router, or load bal…
• CThe management and orchestration layer that provisions VNF instances
• DA hypervisor specifically optimized for running network operating systems

In the ETSI NFV reference architecture, which component is responsible for lifecycle management, instantiation, scaling, and termination of VNF instances?

• ANFV Infrastructure (NFVI)
• BVNF Manager (VNFM)
• COperations Support System (OSS)
• DElement Management System (EMS)

Juniper's vSRX is best described as:

• AA physical SRX branch firewall with integrated Wi-Fi
• BA containerized routing protocol daemon for cloud-native environments
• CA virtual firewall and security gateway that runs as a VM on hypervisors and public clouds
• DA Kubernetes operator that manages Juniper routing policies

Juniper cSRX differs from vSRX primarily because cSRX:

• AIs deployed as a virtual machine on ESXi rather than as a container
• BIs a containerized security gateway designed for microservices and Docker/Kubernetes envi…
• CRequires Contrail Networking as a mandatory underlay
• DOnly supports Layer 2 transparent firewall mode

Juniper cRPD (containerized Routing Protocol Daemon) is best described as:

• AA full Junos OS image packaged as a Docker container including firewall and security feat…
• BA containerized implementation of Junos routing protocols (BGP, OSPF, IS-IS) without the…
• CA Kubernetes CNI plugin that replaces the standard Linux routing stack
• DA virtual version of the Juniper MX Series router designed for NFV deployments

Tungsten Fabric is the open-source version of which Juniper product?

• AJuniper Paragon Automation
• BJuniper Contrail Networking
• CJuniper Apstra
• DJuniper Sky ATP

Juniper Contrail Networking primarily provides which capability in cloud environments?

• APhysical underlay routing using MPLS traffic engineering
• BVirtual network overlay and policy management for multi-tenant cloud environments using S…
• CBare-metal server provisioning and OS installation automation
• DWAN acceleration and traffic optimization for SD-WAN branches

Juniper Paragon Automation is best described as:

• AA cloud-native firewall service running on AWS and Azure marketplaces
• BAn operations automation platform focused on network operations, planning, assurance, and…
• CA hardware programmable ASIC product line for Juniper data center switches
• DA Kubernetes-native CNI plugin for container networking in private clouds

AWS Direct Connect and Azure ExpressRoute both provide which type of connectivity for enterprise cloud integration?

• AInternet-based IPsec VPN tunnels from on-premises to the public cloud
• BDedicated private network circuits bypassing the public internet between on-premises and…
• CSD-WAN overlay connections automatically provisioned by the cloud provider
• DLayer 2 MPLS circuits within the cloud provider's backbone between regions

When deploying Juniper vSRX on AWS, the vSRX image is launched as an EC2 instance. What is one primary use case for vSRX in this deployment?

• AReplacing the AWS VPC network layer entirely with Junos-native routing
• BProviding advanced stateful firewall, VPN gateway, and security services for traffic ente…
• CActing as a bare-metal hypervisor for running additional VMs within the EC2 instance
• DReplacing AWS Transit Gateway for inter-VPC routing inside the same region

An AWS Transit Gateway primarily serves which function in a multi-VPC AWS environment?

• AIt provides internet egress for private subnets using network address translation
• BIt acts as a regional hub router allowing VPCs and on-premises networks to communicate th…
• CIt encrypts data at rest in Amazon S3 buckets
• DIt monitors VPC traffic and generates security threat alerts

Azure Virtual WAN is designed to solve which networking challenge?

• AReplacing Azure Load Balancer with software-defined traffic distribution
• BProviding a cloud-managed WAN hub that simplifies any-to-any connectivity between branche…
• CEncrypting all traffic within an Azure Virtual Network using hardware security modules
• DDelivering Container Network Interface (CNI) plugins for Azure Kubernetes Service

GCP Cloud Interconnect provides which type of connectivity option to Google Cloud?

• AInternet-based BGP sessions with Google without a physical cross-connect
• BDedicated high-bandwidth private circuits from customer or partner colocation facilities…
• CManaged SD-WAN CPE devices shipped to branch offices for automatic cloud onboarding
• DVPN tunnels over the public internet with Google-managed IPsec keys

In infrastructure automation, what is the primary purpose of Terraform?

• ARunning configuration playbooks on network devices using SSH and NETCONF
• BProviding a declarative infrastructure-as-code tool for provisioning and managing cloud r…
• CContainerizing network functions for deployment in Kubernetes clusters
• DMonitoring network telemetry and generating automated remediation actions

Ansible is commonly used for network device automation because it:

• ARequires a persistent agent installed on each network device to push configuration
• BIs agentless and uses SSH or NETCONF to push configuration to network devices using decla…
• COnly supports Python scripts and does not support YAML-based configuration
• DRequires a centralized database to store device states before making any changes

What distinguishes a stateful firewall from a stateless packet filter?

• AA stateless packet filter tracks TCP session state; a stateful firewall inspects individu…
• BA stateful firewall tracks the state of active connections and allows return traffic auto…
• CA stateless filter uses deep packet inspection of application payloads; stateful firewall…
• DStateful firewalls operate at Layer 2; stateless packet filters operate at Layer 3 and ab…

Which LXC feature fundamentally enables container isolation by restricting which system resources a container process can see?

• AHardware virtualization extensions (VT-x/AMD-V)
• BLinux namespaces (PID, network, mount, UTS, IPC, user)
• CBIOS-level memory protection keys
• DOverlay network encapsulation using VXLAN

In the ETSI NFV MANO framework, what role does the NFV Orchestrator (NFVO) play?

• AIt directly manages individual VNF instances on behalf of the VNF Manager
• BIt orchestrates end-to-end network services by coordinating resource allocation across mu…
• CIt provides the physical compute, storage, and networking infrastructure for VNFs
• DIt monitors VNF performance metrics and generates billing records for tenants

Which cloud characteristic describes the ability of a cloud tenant to rapidly provision and release computing resources as needed, often through self-service portals, without requiring human interaction with each service provider?

• ABroad network access
• BResource pooling
• COn-demand self-service
• DMeasured service

Rapid elasticity is a key cloud characteristic. What does it specifically mean in the NIST definition of cloud computing?

• AThe provider can automatically migrate VMs between physical hosts to avoid hardware failu…
• BCloud capabilities can be elastically provisioned and released — often automatically — to…
• CThe cloud metering system can generate invoices in real time as resources are consumed
• DPhysical network cables can be rerouted remotely without physical data center access

In the context of hypervisors, what is a 'guest OS'?

• AThe operating system installed on the physical host server
• BThe operating system running inside a virtual machine, managed by the hypervisor
• CA lightweight OS used only by the hypervisor management console
• DA backup OS image stored on a SAN for hypervisor recovery

In SDN architecture, the 'southbound interface' refers to the communication channel between which two components?

• AThe SDN controller and the network management applications above it
• BThe SDN controller and the data-plane forwarding devices below it
• CTwo peer SDN controllers exchanging topology information
• DThe data-plane devices and the physical hardware switches beneath them

What is the primary benefit of separating the control plane from the data plane in SDN?

• AIt eliminates the need for routing protocols entirely in the network
• BIt allows centralized software to program network behavior dynamically across many device…
• CIt reduces hardware costs because data-plane ASICs are no longer needed
• DIt guarantees zero packet loss during controller failover events

Which Python library is commonly used to interact with Juniper devices via NETCONF for automation tasks?

• Aparamiko
• BPyEZ (ncclient/junos-eznc)
• Crequests
• Dscapy

Infrastructure as Code (IaC) is a practice that treats infrastructure provisioning in the same way as software development. Which statement best describes this approach?

• AInfrastructure is provisioned exclusively via GUI-based cloud consoles without version co…
• BInfrastructure configuration is written as machine-readable definition files (code) that…
• CPhysical server hardware is replaced by software, eliminating all physical data centers
• DNetwork engineers must write kernel-level C code to provision cloud resources

Juniper Contrail Service Orchestration (CSO) primarily provides which capability beyond basic Contrail Networking?

• APhysical server BIOS configuration and firmware updates
• BEnd-to-end service orchestration and lifecycle management for SD-WAN and cloud services,…
• CStorage area network (SAN) provisioning for Juniper QFX data center switches
• DKubernetes cluster deployment and upgrade automation

Which virtualization technology allows multiple isolated user-space instances to share the same OS kernel, unlike hypervisor-based VMs?

• AType 1 hypervisor (bare-metal)
• BType 2 hypervisor (hosted)
• COperating-system-level virtualization (containers)
• DFull machine emulation (QEMU without KVM)

What is the function of a Kubernetes Ingress resource?

• AIt schedules Pods across worker nodes based on resource availability
• BIt defines rules for routing external HTTP/HTTPS traffic to internal cluster Services bas…
• CIt provides persistent block storage volumes to stateful Pods
• DIt encrypts inter-pod traffic within the cluster using mTLS

In NFV, which component defines the lifecycle, functional requirements, and deployment parameters for a VNF in a machine-readable format?

• AVNF Forwarding Graph (VNFFG)
• BVNF Descriptor (VNFD)
• CNetwork Service Descriptor (NSD)
• DVirtualized Infrastructure Manager (VIM)

Which statement correctly describes the relationship between Docker Hub and Docker images?

• ADocker Hub is a local registry that only stores images built on the same host machine
• BDocker Hub is a cloud-based public registry where Docker images are stored and distribute…
• CDocker Hub is the runtime component that executes containers on the host OS
• DDocker Hub manages Kubernetes cluster deployments and stores Helm charts exclusively